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It is well known that measurements performed on spatially separated entangled quantum systems 
can give rise to correlations that are non-local, in the sense that a Bell inequality is violated. They 
cannot, however, be used for super- luminal signalling. It is also known that it is possible to write 
down sets of "super-quantum" correlations that are more non-local than is allowed by quantum 
mechanics, yet are still non-signalling. Viewed as an information theoretic resource, super-quantum 
correlations are very powerful at reducing the amount of communication needed for distributed 
computational tasks. An intriguing question is why quantum mechanics does not allow these more 
powerful correlations. We aim to shed light on the range of quantum possibilities by placing them 
within a wider context. With this in mind, we investigate the set of correlations that are constrained 
only by the no-signalling principle. These correlations form a polytope, which contains the quantum 
correlations as a (proper) subset. We determine the vertices of the no-signalling polytope in the 
case that two observers each choose from two possible measurements with d outcomes. We then 
consider how interconversions between different sorts of correlations may be achieved. Finally, we 
consider some multipartite examples. 

PACS numbers: 03.65.Ud, 03.67.-a 



I. INTRODUCTION 

In a typical Bell- type experiment, two entangled par- 
ticles are produced at a source and move apart to sepa- 
rated observers. Each observer chooses one from a set of 
possible measurements and obtains some outcome. The 
joint outcome probabilities are determined by the mea- 
surements and the quantum state. One of the more strik- 
ing features of quantum mechanics is that joint outcome 
probabilities can violate a Bell- type inequality 0, indi- 
cating that quantum mechanics is not, in Bell's terminol- 
ogy, locally causal. This prediction has been confirmed 
in numerous laboratory experiments . 

Abstractly this scenario may be described by saying 
that the two observers have access to a black box. Each 
observer selects an input from a range of possibilities and 
obtains an output. The box determines a joint probabil- 
ity for each output pair given each input pair. It is clear 
that a quantum state provides a particular example of 
such a box, with input corresponding to measurement 
choice and output to measurement outcome. More gcn- 
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orally, boxes can be divided into different types. Some 
will allow the observers to signal to one another via their 
choice of input, and correspond to two-way classical chan- 
nels, as introduced by Shannon Q. Others will not al- 
low signalling - it is well known, for example, that any 
box corresponding to an entangled quantum state will 
not. This is necessary for compatibility between quantum 
mechanics and special relativity. Of the non-signalling 
boxes, some will violate a Bell-type inequality. The sig- 
nificance of this can be spelt out in information theoretic 
terms: separated observers without the box, who have 
access to pre-shared classical random data but no other 
resources, and in particular who cannot communicate, 
will not be able to simulate the box. We refer to any 
such box (and to the corresponding correlations) as non- 
local. 

In general, these boxes can be viewed as an informa- 
tion theoretic resource. This is obvious in the case of 
signalling boxes, or classical channels. However, it is also 
known that non-local correlations arising from an entan- 
gled quantum state, even though they cannot be used di- 
rectly for signalling, can be useful in reducing the amount 
of signalling that is needed in communication complexity 
scenarios below what could be achieved with only shared 
random data Q. A local black box is, of course, simply 
equivalent to some shared random data, which in turn 
(depending on the precise nature of the problem) may be 
better than nothing Q . 

A good question to ask now is, can any set of non- 
signalling correlations be produced by measurements on 
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some quantum state? The answer, in fact, is no. This was 
shown by Popescu and Rohrhch ^ , who wrote down a set 
of correlations that return a value of 4 for the Clauser- 
Horne-Shimony-Holt (CHSH) expression 01 , the maxi- 
mum value algebraically possible, yet are non-signalling. 
The maximum quantum value is given by Cirel'son's the- 
orem as 2-\/2 [g. These should be compared with the 
maximum value obtainable by non-communicating clas- 
sical observers, which is 2. Popescu and Rohrlich con- 
cluded that quantum mechanics is only one of a class of 
non-local theories consistent with causality. In terms of 
our boxes, there are some boxes that are non-signalling 
but are more non-local than is allowed by quantum me- 
chanics. It is interesting to note that from an informa- 
tion theoretic point of view, some of these latter are very 
powerful. For example, van Dam has shown that 
two observers who have access to a supply of Popescu- 
Rohrlich-type boxes would be able to solve essentially 
any two-party communication complexity problem with 
only a constant number of bits of communication. This 
should be contrasted with the quantum case, for which it 
is known that certain communication complexity prob- 
lems require at least n bits of communication even if un- 
limited shared entanglement is available |lOl |. 

In this work, we investigate the set of non-signalling 
boxes, considering them as an information theoretic re- 
source. Clearly this set includes those corresponding to 
measurements on quantum states as a subset. The mo- 
tivation for studying the wider set is partly that it is 
interesting for its own sake. This is true even though 
no correlations other than quantum correlations have so 
far been observed in Nature. Our findings are prelimi- 
nary, but it is already clear that the set of non-signalling 
boxes has interesting structure, and one finds analogies 
with other information theoretic resources, in particular 
with the set of entangled quantum states. This work is 
not, however, purely academic. Another motivation is 
that a better understanding of the nature of quantum 
correlations can be gained by placing them in a wider 
setting. Only in this way, for example, can one hope 
to answer Popescu and Rohrlich's original question, of 
why quantum correlations arc not more non-local than 
they are. More generally, a proper understanding of the 
information theoretic capabilities of quantum mechanics 
includes an understanding of what cannot be achieved as 
well as what can. 

This article is organized as follows. In Sec. Ill Al we in- 
troduce the convex polytopc that describes the set of non- 
signalling correlations. In Sec. Ill Bl we examine more 
closely the particular case of correlations involving two 
possible inputs, obtaining all the vertices of the corre- 
sponding polytopc. We then consider, in Sec. Ill CI how 
interconversions between these extreme points may be 
achieved using local operations. Sec. IIIII is devoted to 
three-party correlations and in Sec. 



nil Dl we examine 
how extremal correlations correlate to the environment. 
We conclude with some open questions in Sec. IIVI 



II. TWO PARTY CORRELATIONS 

A. Definitions 

The no-signalling polytopc. A bipartite correlation 
box (hereafter, just "box") is defined by a set of pos- 
sible inputs for each of Alice and Bob, a set of possible 
outputs for each, and a joint probability for each output 
pair given each input pair. We denote Alice's and Bob's 
inputs X and y respectively, and their outputs a and b. 
The joint probability of getting a pair of outputs given 
a pair of inputs is Pab\xY- Since Pab\xY a-i'c probabilities 
they satisfy positivity, 



Pab\xY>^ ya,b,x,Y 
and normalization, 



"^PablxT^^ y X,Y. 



(1) 



(2) 



In this work we only consider non-signalling boxes, i.e, 
we require that Alice cannot signal to Bob by her choice 
of X, and vice versa. This means that the marginal prob- 
abilities Pa\x and pi,\y are independent of y and x respec- 
tively: 

^Pab\x.Y = ^Pab\x.Y' =Pa\x Va,x,y,y'(3) 

b b 
^Pab\x.Y = ^Pab\x'.Y = Pb\Y y b,Y,X,X'.{4) 



A concrete example of a correlation box is an experi- 
ment with two spin-half particles, with the inputs x and 
Y labelling Alice's and Bob's analyzer settings and the 
outputs a and b labelling the experimental outcomes. In 
a quantum experiment like this one, it is generally the 
case that the outcome of the measurement is obtained 
as soon as the measurement is performed. In addition, 
the entanglement is destroyed after the measurements, so 
that if the experiment is to be repeated a new entangled 
state is needed. We define boxes to have the same prop- 
erties. Alice can select her input at any time and obtains 
her output immediately, and similarly Bob. There may of 
course be a time delay between Alice selecting her input 
and Bob selecting his input, but this makes no difference 
to the correlations. Further, after a box is used once, it 
is destroyed and to repeat the experiment a new box is 
needed. 

We will always consider that the number of possible 
inputs and outputs is finite. Since the above constraints 
arc all linear, the set of boxes with a given number of 
inputs and outputs is a polytopc, which we denote by 
v. It is easy to see that the set is convex - if two boxes 
each satisfy the constraints, then a probabilistic mixture 
of them (defined in the obvious manner) will also do so. 

The local polytopc. In general, the set of non- 
signalling boxes can be divided into two types, local and 
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FIG. 1: A schematic representation of the space of non- 
signalling correlation boxes. The vertices are labelled L and 
NL for local and non-local. Bell inequalities are the facets 
represented in dashed lines. The set bounded by these is L. 
The region accessible to quantum mechanics is Q. A general 
non-signalling box £ V ■ 



non-local. A box is local if and only if it can be simu- 
lated by non-communicating observers with only shared 
randomness as a resource. This means that we can write 



B. The two-inputs no-signalling polytope 

1. Two outputs 

Having defined the objects that we are interested in, 
we begin by considering in detail the simple case in 
which Alice and Bob are each choosing from two in- 
puts, each of which has two possible outputs. We write 
X, Y,a,b £ {0, 1}. The probabilities Pab\XY thus form a 
table with 2^ entries, although these are not all indepen- 
dent due to the constraints of Sec. Ill Al The dimension 
of the polytope is found by subtracting the number of in- 
dependent constraints from 2"*, and turns out to be 8. To 
understand the polytope V, we wish to find its vertices. 
These will be boxes that satisfy all of the constraints and 
saturates a sufficient number of the positivity constraints 
to be uniquely determined. In the next subsection, we 
present an argument that allows us to find all the vertices 
of the two- input d-output polytope. Here we simply state 
the results for the simple two-input two-output case. 

We find that there are 24 vertices, which may be di- 
vided into two classes, those corresponding to local boxes 
and those corresponding to non-local boxes. Local ver- 
tices are simply the local deterministic boxes, which as- 
sign a definite value to each of Alice's and Bob's inputs. 
There arc thus 16 local vertices, which can be expressed 
as 



Pab\xi 



^P\Pa\xWPb\YW, 



(5) 



where A is the value of the shared random data and p\ 
is the probability that a particular value of A occurs. We 
have that Pa\xW is the probability that Alice outputs a 
given that the shared random data was A and the input 
was chosen to be x, and similarly for pb|y(A). 

We recall what is known about the set of local boxes 
(see for instance 0,^3)- This set is itself a convex poly- 
tope, with vertices corresponding to local deterministic 
boxes {al\pa\XiPb\Y are or 1). The positivity conditions 
of Eq. are trivial facets of this polytope, while non- 
trivial facets correspond to Bell- type inequalities. Vio- 
lation of the latter implies that a point lies outside the 
local polytope, and that the corresponding box is there- 
fore non-local. We denote the local polytope by £. 

Quantum mechanical correlations. Finally, there is a 
third set of interest, the correlations obtainable by mea- 
surements on bipartite quantum states. We denote this 
set Q (where Q is defined for a fixed number of measure- 
ment settin gs a nd outcomes) . The set Q is investigated in 
Rcfs. |1,E3C3jQE3- It is convex but is not a polytope 
as the number of extremal points is not finite. Since the 
correlations allowed by quantum mechanics can violate 
Bell inequalities, Q is non-local. However, as they vio- 
late the CHSH inequality only up to Cirel'son's bound of 
2^2 nil, they form a proper subset of the no-signalling 
polytope. Overall, we have that C C Q C V . This situa- 
tion is illustrated in Fig. ^ 



Pab\} 



1 : a = ax ® /?, 
: otherwise, 



(6) 



where a, (3,^,5 G {0,1}. Here and throughout, © de- 
notes addition modulo 2. 

The 8 non-local vertices may be expressed compactly 



as 



1/2 




a®b = x.Y ( 
otherwise. 



(7) 



where a, /3, 7 G {0, 1}. We will refer to these boxes as 
Popescu-Rohrlich (PR) boxes. 

By using reversible local operations Alice and Bob can 
convert any vertex in one class into any other vertex 
within the same class. There are two types of reversible 
local operations. Alice may relabel her inputs, x x©l, 
and she may relabel her outputs (conditionally on the 
input), a — > a © ax © [3. Bob can perform similar opera- 
tions. Thus up to local reversible transformations, each 
local vertex is equivalent to the vertex setting a = 0, 
/3 = 0, 7 = 0, (5 = 0, i.e. 



Pab\xY 



a = and b 
otherwise. 







Each non-local vertex is equivalent to 

Pab\xY 



_j 1/2 




a © 6 = x.Y 
otherwise. 



(8) 



(9) 
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We note that if we allow irreversible transformations on 
the outputs we may convert any non-local vertex into a 
local vertex. 

For the case of two inputs and two outputs, it is well 
known that the only non-trivial facets of the local poly- 
tope £ correspond to the CHSH inequalities There 
is an important connection between the CHSH inequali- 
ties and the non-local vertices of V . In order to explain 
this, we first recall explicitly the CHSH inequalities. Let 
{ij) be defined by 

1 

= E {-^r^'Pa^X^^,Y=r (10) 
a,h=0 

Then the non-trivial facets of C are equivalent to the 
following inequalities. 

B^p^ ^ (00) + (-1)^+^ (01) 

+ (-1)"+'' (10) + (11) < 2, 

where a, /3, 7 G {0,1}. For each of the 8 Bell expres- 
sions i?Q/3-y, the algebraic maximum is B^p^ = 4. We 
find that for each choice of a, /3, 7 the correlations de- 
fined by Eq. ^ return a value for the corresponding Bell 
expression of Bap-y = 4. Thus there is a one-to-one cor- 
respondence between the non-local vertices of V and the 
non-trivial facets of C, with each vertex violating the 
corresponding CHSH inequality up to the algebraic max- 
imum. These extremal correlations describe in a compact 
way the logical contradiction in the CHSH inequalities. 

2. d outputs 

We now generalize the results of the preceding section. 
Again we have two parties, Alice and Bob, who choose 
from two inputs x and y S {0, 1} and receive outputs 
a and b with a joint probability Pab\xY- We denote the 
number of distinct outputs associated with inputs x and 
Y by and d^- If Alice's input is x, for example, then 
ae{0,...,d^-l}. 

Theorem 1 The non-local vertices of V for two input 
settings and d^ and d^ outputs are equivalent under re- 
versible local relabelling to 

{\/k : [b ~ a) vaod k = x.Y 
a,6e {0,...,fc- 1} (12) 
: otherwise, 

for each k e {2, . . . , minx,i'((i^, d^)}- 

We note that the case = = 2 gives the PR 
correlations we found previously. U d^ ^ df. ~ k ^ d 
then the vertex violates the d-dimensional generalization 
of the CHSH inequality |l7j up to its algebraic maximum. 
We call such a box a c?-box (a more complete name would 
specify that the number of parties and the number of 



inputs per party are each two, but this simple name will 
do for our purposes). 

Proof of Theorem ^ A probability table Pab\xY 
is a vertex of V if and only if it is the unique solution 
of Eqs. id},©,® and Q with dim(7') of the positivity 
inequalities replaced with equalities. 

It will be useful to distinguish two kinds of extremal 
points: partial-output vertices and full-output vertices. 
Partial-output vertices are vertices for which at least one 
of the Pa\x = or p^li^ = 0. They can be identified 
with vertices of polytopes V' with fewer possible outputs: 
d'^ < d^ or d'y < c?f . Conversely, the vertices of a 
polytope V, with d'^ < d^ or d'^ < df, can be extended 
to vertices of V by mapping the outcomes of x' and y' to 
a subset of the outcomes of x and y, and by assigning a 
zero probability I X = Oandp^y ~ to extra outcomes. 
Full-output vertices are vertices for which all pa|x 7^ 
and p^y ^ 0, i.e., for which all outputs contribute non- 
trivially to Pab\xY- Thus the extremal points of a given 
two-settings polytope consist of the full-output vertices 
of that polytope and, by iteration, of all the full-output 
vertices of two-settings polytopes with fewer outcomes. 
Hence in the following, we need construct only the full- 
output vertices for a polytope characterized by d^ and 

The joint probabilities Pab\xY form a table of 
J2x Y dx^Y entries. These are not all independent be- 
cause of the normalization and no-signalling conditions. 
There are 4 normalization equalities expressed by Eq. Q 
and X^Y^x + X^v*^? no-signalling equalities expressed 
by Eqs. © and (0J. But for each value of x, the 
no-signalling condition for one of Alice's outputs can 
be deduced from the conditions of normalization and 
no-signalling for the d^ — \ other outputs. A similar 
argument applies for each value of y and Bob's out- 
puts. Hence Eqs. (0), Q and form a set of only 

4 + T.xidi - 1) + Ey(rf? - 1) = Y.xidi) + Ey(rf?) 
linearly independent equations. The dimension of the 
no-signalling polytope is thus 

1 11 

dMv) = dU^ -^Y^di-Y^d^ . (13) 

x,Y=0 x=0 r=0 

This is the number of entries in the table Pab\xY that 
must be set to zero to obtain a vertex. Moreover, to 
obtain a full-output vertex, these must be chosen so that 
neither Pa\x ~ nor Pb\Y ~ 0- If we fix a particular pair 
of inputs {x, y), then no more than d^d^ — max(c?^, df^) 
probabilities may be set to zero, otherwise there will be 
fewer than max(c?^,d^) probabilities Pab\xY > 0; ^nd 
thus one of Alice's or one of Bob's outcomes will not be 
output for these values of x and y. Because of the no- 
signalling conditions it will not be output for the other 
possible pairs of inputs, so the vertex will be a partial- 
output one. Overall, the maximal number of allowed zero 
entries for a full-output vertex is 

Z = ^(d^df -max(d^,df)) . (14) 
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Such a vertex is thus possible if dim(P) < Z, or 



^ 4 + E ^ E max(d^ , ) . (15) 

A'=0 •s'=0 x,i'=0 

This condition is fulfiUcd (with equahty) only for = 
rff = d, Vx.y G {0,1}. 

We can thus restrict our analysis to d-outcome poly- 
topes. The extremal points of more general ones, where 
7^ "^ill be the full-output extremal points of d- 
outcomes polytopes for d = 2, . . . , min^.y (d^i '^y )■ 

Using d^ = d^. = d, Vx.y G {0,1} in the discussion 
before Eq. H14|l . it follows that the dimension of a d- 
outcome polytope is 4d((i — 1) and that for a given pair 
of inputs exactly d{d — 1) probabilities must be assigned 
the value zero, or equivalently that d probabilities must 
be > 0. We can therefore write the probabilities as 



Pq6L 



>0 if6 = /^,(a) 
= otherwise. 



(16) 



where fxY (a) is a permutation of the d outcomes. Indeed, 
if fxyia) is not a permutation, then at least one of Bob's 
outcomes will not be output. 

We can relabel Alice's outcomes for x = so that 
/oi('j) = we can relabel those of Bob for y = so that 
/oo(i) = a and finally those of Alice for x = 1 to have 
/io(i) ^ o,- In other words. 



Pab\xi 



> if (6 - a) mod d ■ 
= otherwise. 







(17) 



for (x,y) e {(0, 0), (0, 1), (1, 0)}. It remains to determine 
/ii . It must be chosen so that the probability table Pab\xY 
is uniquely determined, i.e., so that specific values are 
assigned to the probabilities different from zero. In fact, 
it is easy to show that this can only be the case if the 
permutation /n is of order d, i.e., /fi(a) = a only for 
k = mod d. 

The only remaining freedom in the relabelling of the 
outcomes so that property l|17|l is conserved, is to rela- 
bel simultaneously the outputs for all four possible in- 
puts. We can relabel them globally so that /ii(a) = 
(a -|- 1) mod d. This implies that Pab\ii = 1/d if {b — 
a) mod d = 1. This completes the proof. □ 



C. Resource conversions 

In the preceding section we found all the vertices of the 
no-signalling polytope for bipartite, two-input boxes. As 
described in the introduction, the ethos adopted in this 
work is that boxes (in particular, non-local boxes) can be 
regarded as an information theoretic resource, and inves- 
tigated as such. Useful comparisons can be drawn with 
other information theoretic resources, including shared 
random dat a 113 . shared secret data |0, and en- 
tanglement |23|. In each case, there is a convex set of 



Resource 


Instantiation 


Quantitative measure 


Shared random data 
Shared secret data 
Entanglement 
Non-locality 


Random variables 
Random variables 
Quantum states 
Boxes 


Mutual information 
Secrecy rate 
Entanglement cost 
Classical simulation cost 



TABLE I: Comparison of information theoretic resources. 



possible states and a notion of interconversion between 
different states. There is also a notion of interconver- 
sion between different resources. Each resource is useful 
for some task(s) and can be quantified via some mea- 
sure(s). Some of this is illustrated in Tabled Note that 
the quantitative measures given are not the only possibil- 
ities. Note also that even if the given measure vanishes, 
a useful resource may still be present. Thus uncorre- 
lated random variables can still be useful (as local ran- 
domness), as can separable quantum states (for various 
things), as can local boxes (as local or shared random- 
ness) . 

In light of this, it is natural to ask, what interconver- 
sions between boxes are possible, and what would be a 
good measure of the non-locality of a box? To the sec- 
ond question, several answers suggest themselves, such as 
the amount of classical communication needed to simu- 
late the box (given that the only other resource is shared 
random data) , and the degree of violation of Bell inequal- 
ities |22j . In this work, however, we concentrate on the 
first question - partly because it is independently inter- 
esting, and partly because an understanding of possible 
interconversions is a prerequisite for a good understand- 
ing of quantitative measures. 

The problem that we consider, then, is whether one 
can simulate one type of box, using one or more copies 
of another type as a resource. Local operations such as 
relabelling are of course allowed. As non-locality is the 
resource that we have in mind, it is also natural to al- 
low the parties free access to local boxes (i.e., to local 
and shared randomness). We note, however, that nei- 
ther local nor shared randomness can help if the box to 
be simulated is a vertex [s^ , thus none of the protocols 
we describe below make use of this. We make the as- 
sumption that communication between the parties is not 
allowed. 

In general, outputs for one box can be used as inputs 
for another box. This allows non-trivial protocols to be 
constructed. As an interesting logical possibility, we note 
that the temporal order in which each party uses the 
boxes need not be the same, and that this allows loops 
to be constructed that would be ill-defined if it were not 
for the no-signalling condition. (Thus if signalling boxes 
were to be considered, our stipulation that outputs are 
obtained immediately after inputs would have to be al- 
tered.) Such a loop is illustrated in Fig.|21 In all of the 
protocols presented below, however, the parties use the 
boxes in the same temporal order. 

In the following, we will describe three simple exam- 
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FIG. 2: An example of how two parties that are given two 
boxes may process locally their inputs and outputs. They re- 
sult in simulating another type of box with inputs x,y and 
outcomes a, h. Note that due to the no-signalling condition, 
the parties can use their two boxes with a different time or- 
dering. 




FIG. 3; Making a 4-box from two PR boxes. Alice inputs x 
into the first box and a.x into the second, while Bob inputs 
Y into both boxes. Alice's output is given by a = 2a' -\-a and 
Bob's by fo = 2/3' + f3. 



pies. We shovif that given a d-box and a d'-box, we can 
simulate a dd'-hox. Wc will also show that given a dd'- 
box, we can simulate one d-box. Finally, an unlimited 
supply of d-boxes can simulate a d'-box to arbitrarily 
high precision. In addition, we will describe a negative 
result: it is not in general possible to go reversibly from 
n d-boxes to m d'-boxes, where d ^ d' . Although we only 
prove this for exact transformations, we believe a similar 
result should hold even if transformations need only be 
exact in an asymptotic limit. It follows from this that 
d and d'-boxes are ultimately inequivalent resources and 
that in our context, it is inappropriate to suppose that 
they can be characterized by a single numerical measure 
of non- locality |3^ . 

Suppose first, then, that Alice and Bob have one d-box 
and one d'-box and they wish to simulate one dd'-box. 
Simulate means that for each value of x e {0,1}, a 
procedure should be defined for Alice, using the d and 
d'-boxes, that eventually enables her to determine the 
value of an output a € {0, . . . , dd' — 1}. Similarly for 
Bob; for each value of y there is an eventual output b. 
The joint probabilities for a and b should satisfy Eq. H12|) 
(with dd' inserted instead of d where necessary). 

Protocol 1: 1 d-box and 1 d'-box 1 dd'-box 

Alice. Alice inputs x into the d-box, obtaining outcome 
a. She then inputs x into the d'-box if a = d — 1, and 
inputs into the d'-box otherwise, obtaining an output 
a' . Alice's output for the protocol is a = a'd + a. 
Bob. Bob inputs Y into the d-box, obtaining output /?, 
and inputs Y into the d'-box, obtaining output /?'. His 
output for the protocol is then b = j3' d + (3. 

Protocol 1 is illustrated in Fig. Ofor the case d = d' = 2. 
We indicate briefly why this protocol works. Recall 
that a dd'-box satisfies (6 — a) mod dd' = xy. Write 
a = a'd -|- a and b — (3' d -\- (3, where a can take values 
a = 0, . . . , d— 1, and a' can take values a' = 0, . . . , d' — 1, 
and so on. We see that the condition satisfied by a 



dd'-box is equivalent to 

(3 — a mod d = xy 

P'-a' modd' = • " = ^-1 (18) 

I : otherwise. 

Protocol 1 is designed precisely to satisfy this condition. 
It is then not difficult to check that the correct probabil- 
ities are reproduced. 

We note next that it is easy to convert one dd'-box 
into one d-box. 

Protocol 2: 1 dd'-box 1 d-box 

Alice. Alice inputs x into the dd'-box, obtaining an 
output a. Her output for the protocol is then a ~ a 
mod d. 

Bob. Bob inputs y into the dd'-box, obtaining an output 
p. His output for the protocol is = /3 mod d. 

Again, it is not difficult to check that [b — a) 
mod d = XY, and that the correct probabilities 
are reproduced. 

Now wc show how n d-boxes can be used to simulate 
a d'-box to arbitrarily high precision. This is done using 
a combination of Protocols 1 and 2. 

Protocol 3: n d-boxes ~-> 1 d'-box 

Alice and Bob begin by using the n d-boxes to simulate 
a d"-box, as per Protocol 1. Call the outputs for the 
d"-box a and (3. They satisfy {f3 — a) mod d" = xy. 
Alice and Bob now use Protocol 2 to obtain something 
close to a d'-box: the final outputs are a = a mod d' 
and b = (3 mod d'. 

If d" = kd' for some positive integer fc, this proto- 
col works exactly. Otherwise, one can calculate the 
errors resulting in Protocol 3. Denote by k the largest 
integer such that kd' < d". Now we have that if 
X = or y = 0, then {b — a) mod d' = as required. 
However, the probabilities are skewed by an amount 
(xl/fc«d'/d". li X = Y = 1, then the probabilities 
are skewed in a similar manner. But in addition we 
have that if & = d" — 1, then (6 — a) mod d' = 1 is not 
satisfied with probability 1/d". The important thing 
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here is that all errors tend to zero exponentially fast as 
n becomes large. 

We have seen several examples of how intcrconversions 
between non-local extremal boxes are possible using only 
local operations. It is also interesting to consider how 
boxes may be simulated using only classical communica- 
tion (CC) and shared random data (SR), i.e., without 
other boxes. For example, we can see that one rf-box 
may be simulated with one bit of 1-way communication 
and log2 d bits of shared randomness. 

Protocol 4: 1 bit CC and logg d bits SR 1 d-box 

Alice and Bob share a random variable a G 
{0, • • • , c? — 1}, where a takes all its possible values 
with equal probability 1/d. 

Alice. Alice sends her input x to Bob and outputs 
a = a. 

Bob. Bob, knowing x and a, outputs b = {a + x.y) 
mod d. 

This protocol is optimal regarding the amount of 
1-way communication exchanged. This is a consequence 
of the following lemma, which places a lower bound on 
the amount of communication needed to simulate boxes. 
The lemma is used in the proof of Theorem [21 our final 
main result for this section. 

Lemma 1 The simulation of n d— boxes using 1-way 
communication requires at least n bits of communication 
if shared randomness is available, and n + n log2 d bits 
without shared randomness. 

Proof. Note that this bound can be achieved using Pro- 
tocol 4 for each of the n boxes, replacing if necessary 
n log2 d bits of shared randomness by n log2 d bits of com- 
munication from Alice to Bob. 

Let us show that this amount of communication is nec- 
essary. Suppose first that both parties have access to 
shared random data and that communication is allowed 
from Alice to Bob. Bob's output is thus b = b{Y,C,r) 
where Y = Yi . . .Yn are the joint inputs for Bob, C is the 
communication and r the shared data. Note simply that 
for Alice, there are 2" possible joint inputs into n d-boxes. 
If Alice is sending fewer than n bits, there will be at least 
one pair of joint inputs for which her communication is 
the same. Call them Xi and X2. A careful examination 
of the definition of a d-hox reveals that there will be at 
least one joint input of Bob's into the n boxes such that 
his output must be different according to whether Alice's 
input was Xi or X2. Thus < n bits of communication 
are not sufficient. 

If Alice and Bob do not have access to shared random- 
ness, then Bob's output is of the form b = b{Y,C). The 
proof then follows by an argument similar to the one used 
above, noting that for Alice there are 2"+"'°S2 possible 
joint input-output pairs {X,A). □ 

These types of considerations will help us to establish 
the final result of this section. 



Theorem 2 It is in general impossible, using local re- 
versible operations, exactly to transform n d-boxes into 
m d' -boxes. 

The theorem follows from the following two lemmas. 

Lemma 2 Using n d-boxes, Alice and Bob can exactly 
simulate at most n d' -boxes, for d > d' . 

Lemma 3 Using n d' -boxes, Alice and Bob can exactly 
simulate at most n(l + log2 d')/{l + log2 d) < n d-boxes 
for d' < d. 

Proof. We prove Lemma 12 as follows. We know that 
we can simulate n d-boxes with n bits of communica- 
tion and nlogd bits of shared randomness. Suppose 
that there were a protocol using only local operations 
that could convert n d-boxes into N d' boxes, for some 
d' < d, where N > n. Then, by combining the sim- 
ulation of the d-boxes with the protocol for their con- 
version, we would have constructed a protocol for sim- 
ulating N d'-boxes using only n bits of communication, 
in contradiction with Lemma ^ The proof of Lemma 13 
is very similar. Note that we can simulate n d'-boxes 
with n-\-n log2 d' bits of classical communication and no 
shared randomness. Suppose that there were a proto- 
col that converts n d'-boxes into N d-boxes, for some 
d > d', where N > n(l -I- log2 d')/(l 4- log2 d). As argued 
above, it follows from the fact that d-boxes are vertices 
that this protocol would not need any additional shared 
randomness. Then we would have constructed a proto- 
col for simulating N d-boxes using only n-\-n log2 d' bits 
of communication and no shared randomness, again in 
contradiction with Lemma ^ □ 

III. THREE PARTY CORRELATIONS 
A. Definitions 

In this section, we generalize the considerations of the 
previous sections to consider tripartite correlations. As 
before, we consider that correlations are produced by a 
black box with specified inputs and outputs, but now 
the box is assumed to be shared between three separated 
parties, A, B and C. 

The no-signalling polytope. A box is defined by joint 
probability distributions Pabc\XYZ, which satisfy positiv- 

ity, 

Pabc\xYz>0 ya,b,c,x.Y,z (19) 
normalization, 

Pabc\xYZ = 1 V x,Y,z (20) 

and no-signalling. With three parties it is possible to 
imagine various types of communication, and correspond- 
ingly there are different types of no-signalling conditions. 
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Obviously we require that A cannot signal to B or C (and 
cyclic permutations). We should also, however, require 
the stronger condition that if the systems B and C arc 
combined, then A cannot signal to the resulting compos- 
ite system BC. This is expressed by 



bc\x,Y,z 



^Pabc\x',Y,z yb,C,Y,Z,X,X', (21) 



where, again, we include cyclic permutations. Finally, 
note that if systems A and B are combined, the resulting 
composite system AB should not be able to signal to 
C. This type of condition does not require a separate 
statement, however, as it already follows from Eq. (|21|l . 
Indeed, using the fact that A cannot signal to BC and 
that B cannot signal to AC, wc deduce 

"^Pabclx.Y.z = ^Pabc\x',Y,z V b, C, X ,X' ,Y,Z 
a^b a,b 



= ^Pabc\x' ,Y' ,z ^C,X,X',Y.Y'^Z, 



a^b 

(22) 

which is the condition that AB cannot signal to C. Hence 
the only conditions wc need to impose on a tripartite box 
are those of Eqs. ifTi^ . (jJOjl and f^ . The set of boxes 
satisfying these conditions is the polytope V. 

Locality conditions. In the tripartite well as 

different types of no-signalling condition, there are differ- 
ent types of locality condition. First, a box is fully local 
if the probabilities can be written in the form 



Pah 



C\XYZ / ^ 

A 



P\ Pa\xWPb\YWPc\zW- 



(23) 



The set of such boxes is a convex polytope denoted £. 
Second, we say that a box is two-way local if either there 
exists a bi-partition of the parties, say AB versus C, such 
that the composite system AB is local versus C, or if 
the box can be written as a convex combination of such 
boxes, i.e., 

Pabc\xYZ = Pl2 PAi2Pab|xy(Al2)Pc|z(Al2) 
+ Pl3^ P\i3Pac\xz{>^13)Pb\Y{>^13) 

Al3 

+ P23^ P\23Pbc\Yz{>^23)Pa\x{>^23), (24) 
A23 

where pi2 + P23 + P13 = 1. The set of such boxes is 
again a convex polytope, denoted C2. Finally, any box 
that cannot be written in this form demonstrates genuine 
three-way non-locality. Wc have that £ C C2 C V and 
also that Cc QcV. 

In the following, we restrict our attention to the case 
a,b,c,x,Y,z g {0,1}. We find the vertices of the poly- 
tope V and point out some connections with three-party 
Bell-type inequalities. Finally we consider some exam- 
ples of interconversions, in particular of how to construct 
tripartite boxes using PR boxes as a resource. 



B. Two inputs and two outputs 

For the tripartite boxes with two inputs and two out- 
puts per observer, Eq. H2()|l expresses 8 normalization 
constraints, and Eq. (|21|l expresses 3 x 12 = 48 no- 
signalling constraints. However, as in the bipartite case, 
there is also some further redundancy; there turn out to 
be 38 independent constraints. Therefore the dimension 
of this polytope is dim "P = 2^^ - 38 = 26. 

Finding the vertices of a polytope given its facets is the 
so called "vertex enumeration problem" for which sev- 
eral algorithms are available, although they are efficient 
only for low dimensional problems. We determined the 
extreme points of our three-party polytope, both with 
Porta [23 and cdd It turns out that there are 46 

classes of vertices, where vertices within one class are 
equivalent under local relabelling operations and permu- 
tations of the parties. These 46 classes of extreme points 
can be divided into three categories: local, two-way local 
and three-way non-local. 

Local vertices. This category contains boxes for which 
A's, i?'s and C's outputs are all deterministic. They all 
belong to the same class under reversible local operations, 
a representative of which is: 



Pabc 



a = 0, 6 = 0, c = 
otherwise. 



(25) 



Two-way local vertices. In view of the preceding dis- 
cussion for bipartite correlations, there is only one class 
of extremal two-way local correlations that are not fully 
local. This is because if a box is a vertex, there can be 
only one term in the decomposition on the right hand 
side of Eq. H24(l . Then it follows from Theorem ^ that 
this term must describe a PR box shared between two 
parties, along with a deterministic outcome for the third 
party. Thus any box of this type is equivalent under local 
relabellings and permutations of parties to 



Pabc\} 



1/2 : a e 6 = x.y and c = 
: otherwise. 



(26) 



Three-way non-local vertices. This category contains 
genuine three-party non-local extremal correlations. It is 
much more complex than the two above, since it com- 
prises 44 different classes of vertices. Out of these, we 
mention 3 classes of particular interest. The first class 
can be expressed as 



Pabc 



1/4 : a®6®c 

= X.Y ® x.z 
: otherwise. 



(27) 



If we imagine that B and C form a composite system 
with input Y Q) z and output 6 c, then this is a PR 
box shared between A and BC. We refer to them as 
"X(Y+Z)" boxes. 
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Correlations in the second class arc equivalent to 
1/4 




Pabc 



a © 6© c 

= X.Y © Y.Z © X.Z 

otherwise. 



(28) 



We call them "Svetlichny" correlations (for reasons ex- 
plained below). 

Finally, the third class contains what we call "XYZ" 
correlations. 



Pabc\^ 




a © 6 © c = x.Y.z 
otherwise. 



(29) 



The XYZ correlations are special because, as 
W. van Dam pointed out to us [2^, they can be 
used to solve any three party communication complexity 
problem with only 1 bit broadcast by each party. He 
also pointed out that they have a natural generalization 
to 71 parties: oi © 02 © • • • © a„ = X1.X2 . . . x„, where 
Xi e {0, 1} is the input of party i and Ui € {0, 1} the 
output of party i. These n-party correlations can be 
used to solve any n party communication complexity 
problem with 1 bit broadcast by each party. They can 
be constructed from a supply of PR boxes. 

We conclude this section with some remarks on these 
correlation vertices and known multipartite Bell-type 
inequalities. First, each of the X(Y-I-Z). XYZ, and 
Svetlichny boxes violates the Mcrmin-Klyshko inequality 
[26ll2^ up to the algebraic maximum. Second, we recall 
that inequalities can be written down that detect gen- 
uine three-way non-locality. One such is the Svetlichny 
inequality ^3 • If we define (« j fe) by 



(zjfc) = ^(-l) 



Pa,b,c\x=i,Y=j.z=k 1 



(30) 



then the Svetlichny inequality is 

M ■ 



(000) + (001) + (001) + (Oil) 

+ (100) + (101) + (110) - (111) < 4. 



(31) 



Any local or two-way local box must satisfy this inequal- 
ity. Quantum mechanically we can obtain M = 4_;^ us- 
ing a Greenbcrgcr-Horne-Zeilinger (GHZ) state [23 (al- 
though note that different measurements are needed from 
those that produce the well known GHZ paradox [30l|). 
X(Y+Z) boxes do not violate the Svetlichny inequality 
(although they must violate some Svetlichny-type in- 
equality as they are three-way non-local). Svetlichny 
boxes give M = 8, the algebraic maximum of the expres- 
sion (hence their name); XYZ correlations give M = 6. 

From the fact that some quantum states violate the 
Svetlichny inequality, we can conclude that in the two- 
input two-output case, Q ^ L2. From the fact that bi- 
partite correlations can be more non-local than quantum 
mechanics allows, we can also conclude that £2 ^ Q. 




FIG. 4: Making an X(Y-I-Z) box from 2 PR boxes. Alice 
outputs a = ai © 02, Bob outputs b and Charles outputs c. 



X 



ai X 




FIG. 5: Making a Svetlichny box from 3 PR boxes. Alice 
outputs a = a\ (B a2, Bob outputs 6 = 61 © 63 and Charles 

outputs C = C2 © C3. 



C. Simulating tripartite boxes 

We consider how we may simulate some of these tri- 
partite boxes, using a supply of PR boxes as a resource. 
We will give three examples, showing how to simulate an 
X(Y-I-Z) box with two PR boxes, a Svetlichny box with 
three PR boxes, and an XYZ box with three PR boxes. 

First, suppose that two PR boxes are shared, with 
box 1 between Alice and Bob and box 2 between Alice 
and Charles. The following protocol shows how the three 
observers may simulate one X(Y-I-Z) box (see Fig. 0}. 

Protocol 5: 2 PR boxes 1 X(Y+Z) box 

Alice. Alice inputs x into box 1 and box 2, obtaining 
outputs ai and 02. She then outputs a = ai © 02. 
Boh. Bob inputs y into box 1, obtaining output b. 
Charles. Charles inputs z into box 2 obtaining output c. 



The protocol works because 



a © 6© c : 



Oi © 02 ' 



X.Y ( 



X.Z. 



(32) 



Suppose now that three PR boxes are shared, with 
box 1 between Alice and Bob, box 2 between Alice and 
Charles, and box 3 between Bob and Charles. Protocol 6 
(summarized in Fig. El allows them to simulate one 
Svetlichny box. 

Protocol 6: 3 PR boxes 1 Svetlichny box 

Alice. Alice inputs x into both box 1 and box 2, 
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FIG. 6: Making an XYZ box from 3 PR boxes. Alice outputs 
a = 02, Bob outputs b = bs and Charles outputs c = C2 ffi C3. 

obtaining oi and 02. Her final output is a = ai a2. 
Bob. Bob inputs y into both box 1 and box 3, obtaining 
bi and 63. His final output is 6 = 5i 63. 
Charles. Charles inputs z into both box 2 and box 3, 
obtaining C2 and C3. His final output is c = C2 © C3. 

This works because 

a e & e c = ai e &i e 63 e C3 e 02 ® C2 

= X.YS)Y.Z®X.Z. (33) 

Protocol 7 (summarized in Fig. 0) shows how to 
simulate one XYZ box using three PR boxes. 

Protocol 7: 3 PR boxes 1 XYZ box 

Alice. Alice inputs x into box 1, obtaining an output 
oi. She then inputs ai into box 2, obtaining output 02. 
Alice's output for the protocol is a = 02. 
Bob. Bob inputs y into box 1, obtaining an output bi. 
He then inputs bi into box 3, obtaining output 63. Bob's 
output for the protocol is 6 = 63. 

Charles. Charles inputs z into both boxes 2 and 3, 
obtaining outputs C2 and C3. Charles' output for the 
protocol is c = C2 © C3. 

The protocol works because 

a 6 c = a2 ® 63 ffi C2 ® C3 = z.ai e Z.61 = x.y.z. (34) 

Finally, we note that it is of course possible to perform 
conversions among tripartite boxes. For example, it is 
easy to sec how to make one Svetlichny box using two 
XYZ boxes. The protocol is obvious once it is realized 
that a Svetlichny box is locally equivalent to a box de- 
fined by Eq. with XY ®YZ® xz on the right hand 
side replaced by xyz © (1 ® x)(l ® f)(1 ® z). We omit 
the details. 



D. Non- locality and the environment 

Suppose that we have some three party no-signalling 
distribution Pabe\xYE with parties A, B and E. We 
will show that if the reduced probability distribution 



PablxY = J2ePabe\xYE IS a vcrtcx of the bipartite no- 
signalling polytope, then the composite system AB is 
local versus E. This is analogous to the result that pure 
quantum states cannot be entangled with a third party or 
the environment. It means that extremal non-local corre- 
lations cannot be correlated to any other system. (Note 
that this raises interesting new possibilities for cryptog- 
raphy. These are investigated in Ref. |31jj.) 
By Bayes' theorem 

Pabe\xYE Pah\xYEePe\xYE 

— Pab\xYE^Pe\E (35) 

where we have used the fact that AB cannot signal to 
E to deduce the second equality. The condition that E 
cannot signal to AB implies 

Pab\xY = ^Pabe\xYE 

e 

= ^Pab\xYEePe\E (36) 
e 

For each value E, the last equality provides a convex 
decomposition of Pab\xY in terms of non-signalling corre- 
lations, with e playing the role of the shared randomness. 
Since we supposed that Pab\xY is extremal, this decom- 
position is unique and Pab\xYEe = Pab\xY Ve,i?. We then 
deduce 

Pabe\xYE = Pab\xY Pe\E, (37) 

i.e.; that AB is uncorrelated with E. 

A natural question that we leave as an open problem is 
whether the converse is true: if Pab\xY is in the interior of 
the no-signalling polytope, is it always possible to extend 
it to a tripartite distribution Pabe\XYE such that AB is 
non-local versus E7 (It is always possible, if Pab\XY is 
not a vertex, to write it as Pab\XY = J2ePa.be\XYE, where 
E takes the single value E = 0. One can also require 
that E take several values, in such a way that Pabe\XYE 
is non-signalling. What is non-trivial is the requirement 
that Pabe\XYE is uou-local in the partition AB versus E. 
We do not know if this is possible in general.) 

IV. DISCUSSION AND OPEN QUESTIONS 

In conclusion, we have defined non-signalling correla- 
tion boxes and investigated their potential as an informa- 
tion theoretic resource. Once the structure of the set of 
such boxes is understood as a convex polytope, it is clear 
that there are analogies with other information theoretic 
resources, in particular the resource of shared quantum 
states (with non-locality taking the place of entangle- 
ment). With this in mind, we have shown how various 
interconversions between boxes are possible. The set of 
multipartite boxes in particular appears very rich. Fi- 
nally, we furthered the analogy with quantum states by 
demonstrating how non-locality is monogamous, in much 
the same way that entanglement is monogamous. We fin- 
ish with some open questions. 



11 



Non-local vertices and Bell inequalities. We saw in 
Sec. Iim II that for the two-settings two-outcomes poly- 
tope there is a one-to-one correspondence between ex- 
tremal non-local correlations and facet Bell inequalities 
(non-trivial facets of the local polytope). One might won- 
der whether this one-to-one correspondence holds in gen- 
eral. It appears, however, that for more complicated sit- 
uations, involving more possible inputs or outcomes, it 
does not. It would be interesting to investigate what is 
the precise relation between non-local vertices and facet 
Bell inequalities. This might help understand further the 
geometrical structure of non-local correlations. 

Other vertices. We have given a complete character- 
ization of two-inputs extremal non-local boxes in the bi- 
partite case and presented some examples in the tripar- 
tite case. In general, one might also consider extremal 
boxes involving more inputs, more outcomes or more par- 
ties. 

For instance, a natural way to generate more complex 
boxes is by taking products of simpler ones. Suppose 
Alice and Bob have access to two boxes »° , , and 

^aobo\xoYo 

Paibi I Yivi ' where for simplicity we consider that there are 
M possible inputs and d possible outputs for each box. If 
Alice inputs Xq and Xi in each of the two boxes and out- 
puts a = dai + ao and similarly for Bob, they have now 
produced a non-local box with inputs and outputs 
Pnh\^-,- — u \ -P^ h I , where x ~ M Xi + Xn 
and similarly for Y. If the two original boxes were ex- 
tremal for the (M, d) polytope will the product be ex- 
tremal for the (M^, rf^) polytope? In the case of quantum 
states, the analogous result of course holds - a product of 
two pure states is itself a pure state. We have been able 
to show that in the case of boxes, the result holds pro- 
vided that we restrict to extremal boxes with the follow- 
ing property: the output of one party is uniquely deter- 
mined when the two inputs and the other party's output 
are specified. This is true for all the vertices presented in 
this paper. Plausibly it is true for all vertices, but this is 
not proven. 

Interconversions. We have so far been able to achieve 
only a limited set of interconversions between extremal 
boxes. This is especially true for the three party case, 
where there are 46 classes of vertices and we have in- 
vestigated only 5 of these. Understanding what kinds 
of interconversions between extremal boxes are possi- 
ble is necessary to appraise their relative power as an 
information-theoretic resource. 

The motivation is also to answer the general question 
of whether there exist inequivalent types of non-local cor- 
relations. Note for instance that the three-way non-local 
correlations of Eqs. (|27|l . H29() and H28|l cannot be reduced 
to two-way non-local ones using only local operations. 
This follows from the fact that the outcomes for two out 
of the three parties are totally independent of one another 
(unless the outcome of the third party is communicated 
to them) . In this sense genuinely tripartite extremal cor- 
relations and bipartite extremal correlations belong to 
inequivalent classes. Are there inequivalent classes of bi- 



partite extremal correlations? In other words, are there 
two bipartite extremal boxes, such that one cannot sim- 
ulate the other even approximately, no matter how many 
copies are available? 

Another problem is whether all bipartite and multipar- 
tite correlations can be constructed using PR boxes, as is 
the case for all the extremal boxes presented in this paper 
(and thus also for probabilistic mixtures of them). PR 
boxes could then be viewed as the unit of non-local corre- 
lation, in analogy with the bit, qubit and ebit, which are 
the units of classical and quantum information theoretic 
resources. 

Interior points. We have only considered conversions 
between extremal probability distributions. It would be 
interesting to consider the interior points of the polytope, 
which comprise quantum correlations. In particular we 
would like to find out if distillation of such mixed corre- 
lations is possible, i.e., if given a number of copies of a 
mixed box we can by local operations obtain some num- 
ber of extremal boxes. Note that Cirel'son's bound ^3 
shows that the quantum correlations Q, are a proper sub- 
set of the set of all non-signalling correlations V. Thus 
it is impossible to distill correlations in Q to extremal 
correlations. But apart from this, we do not know of 
any constraint on possible distillation of non-local corre- 
lations. 

Finally, one could consider distillation in a new con- 
text, where we allow some communication between the 
parties but account for it at the end of the protocol (as 
noted above, an analogous approach was considered in 
Ref. ^5 in the context of classical distillation of shared 
randomness). Alternatively, following Ref. |23, one could 
introduce a new element, that of secrecy. Suppose that 
inputs and outputs are considered to be secret, and that 
Alice and Bob have a supply of noisy (that is non- 
extremal) boxes. Can Alice and Bob distill a supply of 
extremal boxes, whose inputs and outputs are also secret, 
via public communication? 

As we outlined in the introduction, non-local extremal 
correlations can be a very powerful resource for commu- 
nication complexity problems. This will also be the case 
for correlations that can be distilled to these with no 
or little communication. On the other hand, Cirel'son's 
bound and results in communication complexity [loj put 
limits on the power of quantum mechanics as a resource 
in distributed tasks. A better understanding of the possi- 
ble interconversions between non-local correlations might 
bring an information theoretic explanation of these limi- 
tations. 
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